Security Scan: Zimbra Web Client Sign In

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0919b530-eee8-4429-a8a5-8a442f572074 Domain and IP registration (RDAP)/api/v1/rdap/0919b530-eee8-4429-a8a5-8a442f572074How often this domain was scanned/api/v1/domain/stats/zimbrawebmailclientsignin.netlify.app Scan history for this domain/api/v1/domain/history/zimbrawebmailclientsignin.netlify.app?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://zimbrawebmailclientsignin.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake Zimbra Web Client login on a netlify.app subdomain that impersonates Zimbra and harvests usernames/passwords, with a Telegram bot token used to exfiltrate captured credentials. Do not enter credentials.

Risk Factors (6)

Brand impersonation of Zimbra on a hosting-platform subdomain not controlled by Zimbra/Synacor

Credential-harvesting login form (username + password)

Telegram bot token embedded in page script — credential exfiltration channel

IP-harvesting cross-origin request to api.ipify.org

Single-source phishing threat-intel match on the primary domain

Shared hosting subdomain with unknown creation date

Domain age information unavailable

Details

Page Title

Zimbra Web Client Sign In

Scan Type

public

Favicon Hash

MMH3: -1742728723

MD5: e0dc6025f3ad91101529eaab3879cf79

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'zimbrawebmailclientsignin.netlify.app' is registered, featuring subdomain 'zimbrawebmailclientsignin'. The second-level label 'netlify' is 7 characters long holding two vowels versus 5 consonants. It segments into 3 words: net, li, fy. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Web Client Usemame: Password: M stay signed in Sign In Version: BREUER wn: Zimbra :: the leader in open source messaging and collaboration :: Blog - Wiki - Forums Copyright © 2005-2019 Synacor,...

Page Load Overview

1.36s

Total Load Time

17 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:354 chars

Detector Agreement:50%

Website Classification

Primary Category

forum community discussion39% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

forum community discussion

39%

technology software

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
2	2	-	-